CWE-269


Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

We have discovered 2,695,348 live websites that are affected by CWE-269.

Contact us to get more info







CVEs

  • Count - 197



Website Distribution by Country

Number of websites using CWE-269
United States703,965 websites


Germany356,348 websites
France158,360 websites
Netherlands113,594 websites
Taiwan112,738 websites
Japan95,772 websites
Italy89,378 websites
GB82,326 websites
Russia73,790 websites
Czech Republic66,860 websites

Website Distribution by TLD

Number of websites using CWE-269
.com1,023,904 websites
.de221,280 websites
.org129,632 websites
.net92,626 websites
.nl89,453 websites
.it73,806 websites
.ru63,768 websites
.fr57,919 websites
.cz56,576 websites
.co.uk46,903 websites

Newest CVEs

List of the most recent CVEs that are part of CWE-269
DiscoveredCVEDescriptionWebsites
Aug, 2026CVE-2026-13415 CMP - Coming Soon & Maintenance < 4.1.18 - Editor+ Privilege Escalation via cmp_ajax_import_settings672
Aug, 2026CVE-2026-19220 Forminator Forms < 1.57.1 - Unauthenticated Multisite Site Creation and Privilege Escalation74,388
Aug, 2026CVE-2026-75977 Mang Board WP <= 2.3.7 - Authenticated (Subscriber+) Privilege Escalation to Forged Authentication Cookie318
Aug, 2026CVE-2026-75971 ShopEngine Elementor WooCommerce Builder Addon <= 4.9.4 - Authenticated (Shop Manager+) Privilege Escalation to WXR Import '<wp_option>' Nodes4,800
Aug, 2026CVE-2026-19222 Forminator Forms < 1.57.0.7 - Authenticated Privilege Escalation via Registration Form Role Bypass74,388
Aug, 2026CVE-2026-18776 TrueBooker Appointment Booking < 1.2.7 - Unauthenticated Account Takeover via Multiple AJAX Actions83
Aug, 2026CVE-2026-18432 Frontend Admin by DynamiApps <= 3.29.9 - Unauthenticated Privilege Escalation via 'item_id' Parameter1,436
Aug, 2026CVE-2026-15142 Real Estate Manager Pro <= 12.8.6 - Authenticated (Subscriber+) Privilege Escalation via 'user_has_cap' Filter ID Collision2
Aug, 2026CVE-2026-15312 Propovoice: All-in-One Client Management System <= 1.7.8 - Authenticated (ndpv_manager+) Privilege Escalation via 'role' Parameter2
Aug, 2026CVE-2026-18039 Essential Addons for Elementor < 6.7.2 - Unauthenticated Privilege Escalation via Custom Profile Field Mass Assignment255,495

The most widespread CVEs

List of the most common CVEs that are part of CWE-269
DiscoveredCVEDescriptionWebsites
May, 2026CVE-2026-24072 Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr1,693,773
Jun, 2026CVE-2026-44119 Apache HTTP Server: escalation of privilege through expressions in .htaccess in multiple modules1,577,765
Aug, 2026CVE-2026-18039 Essential Addons for Elementor < 6.7.2 - Unauthenticated Privilege Escalation via Custom Profile Field Mass Assignment255,495
Jul, 2026CVE-2026-12525 Redux Framework < 4.5.13 - Subscriber+ Privilege Escalation to Administrator209,828
May, 2026CVE-2026-5193 Essential Addons for Elementor – Popular Elementor Templates & Widgets <= 6.5.13 - Authenticated (Author+) Limited Privilege Escalation via register_user116,381
Aug, 2026CVE-2026-19220 Forminator Forms < 1.57.1 - Unauthenticated Multisite Site Creation and Privilege Escalation74,388
Aug, 2026CVE-2026-19222 Forminator Forms < 1.57.0.7 - Authenticated Privilege Escalation via Registration Form Role Bypass74,388
Mar, 2026CVE-2026-1993 ExactMetrics 7.1.0 - 9.0.2 - Authenticated (Custom) Improper Privilege Management to Role Privilege Escalation via Settings Update50,894
Jul, 2026CVE-2026-12497 ProfilePress < 4.16.18 - Unauthenticated Privilege Escalation via Registration Role Selection30,857
Jul, 2026CVE-2026-12251 Ultimate Member < 2.12.1 - Unauthenticated Privilege Escalation via Role Selection Field30,394

Websites affected by CWE-269

Top websites that are affected by CWE-269. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
******.com United States**
*************.***.****.****.************.net United States***
*****.***********.com Canada***
********.****.com United States***
*********.net United States***
****************.net United States*,***
*****.cz Czech Republic*,***
***.****.us United States*,***
***.*********.com Singapore*,***
*****.*******.com Singapore*,***
See full domain list